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Abstract — A frequency permutation array (FPA) of length n = 
mX and distance d is a set of permutations on a multiset over 
m symbols, where each symbol appears exactly A times and the 
distance between any two elements in the array is at least d. 
FPA generalizes the notion of permutation array. In this paper, 
under the distance metric foo-norm, we first prove lower and 
upper bounds on the size of FPA. Then we give a construction of 
FPA with efficient encoding and decoding capabilities. Moreover, 
we show our design is locally decodable, i.e., we can decode a 
message bit by reading at most A + 1 symbols, which has an 
interesting application for private information retrieval. 

I. Introduction 

Let n, m and A be positive integers with n = mX, 
and be the set of all permutations on the multiset 

{1, . . . , 1, . . . ,'to, . r. , rri}. A frequency permutation array 
(FPA) is a subset of for some positive integers to, A 
and n = toA. A (A, n, d)-FPA is a subset of S}^ and 
the distance between any pair of distinct permutations is at 
least d under any metric, such as Hamming distance, £oo- 
norm, etc. Permutation array (PA) is simply a special case 
of FPA by choosing A = 1. With a fixed length n, FPA 
has a smaller set of symbols than PA. Thus, codes with FPA 
have a better information rate than those with PA. A widely 
adopted approach to building PAs under Hamming distance, 
see for example [2], is using distance preserving mappings 
or distance increasing mappings from Z| to S^. Most of 
those encoding schemes are efficient but it is not clear how to 
decode efficiently. Lin et al. [8] proposed a couple of novel 
constructions with efficient encoding and decoding algorithms 
for PAs under ^oo-norm. FPA was proposed by Huczynska 
and Mullen [4] as a generalization of PA. They gave several 
constructions of FPA under Hamming distance and bounds for 
the maximum array size. In this paper, we extends the ideas in 
[8] to constructing FPA under ^oo-norm. We prove lower and 
upper bounds of FPA. Then we show the efficient encoding 
and decoding algorithms. Besides, we show that our FPAs are 
locally decodable codes under ^oo-norm. 

Recently, researchers have found that PAs have applications 
in areas such as power line communication (e.g. [9], [12], [13] 
and [14]), multi-level flash memories (see [5] and [6]). Similar 
to the application of PAs on power line communication, we 
can encode a message as a frequency permutation from 



and associate each symbol i G {1, . • • ,m} with a frequency 
fi. Then the message is transmitted as a series of correspond- 
ing frequencies. For example, to send a message encoded 
as (1,2,2,1,3,3), we can transmit the frequency sequence 
(/i, /2, /2, /i, /s, /a) one by one. 

For flash memory application, different from the approach 
by Jiang et. al. [5], [6], we can use FPA to provide multi-level 
flash memory with error correcting capability. For example, 
suppose a multi-level flash memory, where each cell has m 
states, which can be changed by injecting or removing charge 
into or from it. Over injecting or charge leakage will alter 
the state as well. We can use the charge ranks of n cells 
to represent a permutation from 5,^, i.e., the cells with the 
lowest A charge levels represent symbol 1, and so on. With our 
efficient encoding and decoding algorithms, a {\,n, d)-FPA 
can be used in flash memory system to represent information 
and correct errors caused by charge level fluctuation. 

A locally decodable code has an extremely efficient decod- 
ing for any message bit by reading at most a fixed number 
of symbols from the received word. Suppose that a FPA is 
applied to a multi-level flash memory where the length of 
a codeword is nearly a block of cells (about 10^)[1]. This 
feature allows us to retrieve the desire message bits from a 
multi-level flash without accessing the whole block. With the 
locally decodable property, we can raise the robustness of the 
code without loss of efficiency. On the other hand, locally 
decodable codes have been under study for years, see [10] for 
a survey and [15], [3] for recent progress. They are related to 
a cryptographic protocol called private information retrieval 
(PIR for short). We show our construction of FPA can also be 
used in cryptographic application. 

Notations: Let m and A be positive integers and let n — mX 
throughout the paper unless stated otherwise. We use [n] to 
represent the set {1, . . . , n}. denotes the permutations over 

the multiset {1,...,1,... , to, . T. , m}. For two vectors x and 
y of the same dimension, let loo{x,y) ~ max^ \xi — yi\. We 
say two permutations x and y are d-close to each other under 
metric ^(•, •) if S{x,y) < d. The identity permutation in 
5,-^ is (1, . . . , 1, . . . ,TO, . . . ,to). 



II. Lower and upper bounds 

Let Foo{^,n,d) be the cardinality of the maximum 
(A, n,(i)-FPA and Voo{^,n, d) be the number of elements in 
S",^ being d-close to the identity under i?oo-norm. In this 
section, we give a Gilbert type lower bound and a sphere 
packing upper bound of F^o (A, n, d) by bounding Voo (A, n, d). 

First, we show that any rf-radius ball in 5*,^ under Zoo-norm 
has the same cardinality. 

Claim 1: For any x = (xi, . . . , Xn) G S^, there are exactly 
Voo(A,n, d) y's in such that loc{x,y) < d. 

Proof: Since every i G [m] appears exactly A times in 
X, there exists a permutation tt G 5^ such that x — n o I^. 
As a consequence, we have that lao{In,z) = Ioo{x,tt o z) 



z e S}:,l^{Ii^,z) < d}, 
-Y. For any y € Y,we have 
loo{x, y) = loo{Inj ""^^ ° y) ^ d, since tt^^ o y ^ Z. While 



for any 2; e S^. Let Z = {z : 
Y = {ttoz ; 2 e Z} and r = 5,^ 

° y) 

for y' e r, loo{x,y') = loo{In^'^^^ ° v') > d. Therefore, 
only |y| = \Z\ = Voo{\,n, d) permutations in 5,^ are d-close 
to X. ■ 
Theorem 1: 

\s^\ \s^\ 

,} , — 7T < Foo{X,n,d) < " 
Voo{X,n,d-l) Voo{X,n,l^\) 

Proof: To prove the lower bound, we use the following 
algorithm to generate a (A, n, d)-FPA with size > y (xn d-i) ' 

1) C ^ 0, D ^ S^,. 

2) Add an arbitrary x Q D to C, then remove all permu- 
tations that is {d — l)-close to x from D. 

3) If Z? 7^ then repeat step 2, otherwise output C. 

D has initially \S^\ elements and each iteration of step 2 
removes at most Voo{X, n,d — 1), so we conclude |C| > 



Voo(A,n,d-l) ■ 

Now we turn to the upper bound. Consider a (A, n, d)- 
FPA C* with the maximum cardinality. Any two [^^J -radius 
balls centered at distinct permutations in C* do not have any 
common permutation, since the minimum distance is d. In 
other words, the [^^J -radius balls centered at permutations 

in C* are all disjoint. We have |C*| < ^— 

It is clear that \S^\ 



Voo(A,«,L^J)- 

It is already known that 



- (A!)"/A 

Voo(l,«, d) equals to the permanent of some special matrix 
[8]. In this paper, we generalize previous analysis to give 
asymptotic bounds for Theorem [T] The permanent of an n x n 
matrix A — (aij) is defined as 



pevA 



7rGS„ 4=1 



Define a symmetric nxn matrix A^'^'"''^) — 



(\,n,d) 



, where 



(A,«,d) ^ if I [^] - Til I < d; else a\Y''^^ = 0. Note that 



"4 J " I I A 

a permutation (xi 

(A,n,d) 



A 

,Xn) is d-close to if and only if 
Oj'^. ' ' — 1 for every i £ [n]. Now we consider A^-^'^"^''^'> . 
Since the A copies of a symbol are considered identical while 
computing the distance and the entries indexed from {£\ — X + 
1) to i'A of I^j^ represent the same symbol for every £ e [m]. 



It implies that row (^A-A+1) through row £X of A'^^'^"^''^^ are 
identical and so are columns indexed from {£X — A + 1) to ^A 
for every £ e [m]. Thus, we have A^^'^"^'*) = ^(i,™:^) ^ 
where (g) is the operator of tensor product and 1a is a A x A 
matrix with all entries equal to 1. For example, take A = 2, 
TO = 5 and d= 2: 



^(1:5,2) 



^(2,10,2) ^ 
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Let r^^''"'''-' be the row sum of yl(i'™^'^)'s i-th row. We have: 



(l,m,d) 




if i<d, 

\i d < i < m — d, 
\i i > m — d. 



Then for i G [m] and j G [A], the row sum of the (iA — A+j)-th 
row of is Arf '"'''^ due to ^(^.^"^^) = A^^'™^'^) ® 

1a. We first calculate Vao{X,n^d) by using peryl^'*''"'''^ 
Lemma 1: 

pgj.^(A,«,d) 



Voo{X,n,d) 



Proof: 



(A!)"/^ 



perA^-* 
\{xeSl:'ii 



A) 
1 . ' 



(A,n,d) 



1}| 



= |{a;e^i:max,|rj;l-rfl|<d}| 
= (A!)"A|{ye^^max,|[il -y.l <4| 

= (A!)"A|{yG5^^oo(/,i2/) <4I 
= (A!)"/^F„o(A,n,d) 

The first equality holds since is a (0, l)-matrix and 

by the definition of permanent. We can convert x e 5*,,^^ into 
y S 5*^ by setting yi — f^], and there are exactly (A!)"/'*' 
a;'s in S\ converted to the same y. Thus, we know the third 
equality holds. Therefore, the lemma holds by moving (A!)"/'*' 
to the left-hand side of the equation. ■ 
We still need to estimate perA^-'''"'''' in order to get 
asymptotic bounds. Kl0ve [7] reports some bounds and meth- 
ods to approximate perA^^'"''^). We extend his analysis for 

pgj.^(A,«.d)^ 

Lemma 2: per^t^^".'') < [(2dA + A)!] . 

Proof: It is known (Theorem ILS in [11]) that for (0, 1)- 
matrix A, per A < nr=i(^i')~ where ri is the sum of the i-th 



row. Since the sum of any row of A'^'*''"''*^ is at most 2d\ + X, 
we have per A < nr=i[(2dA + A)!] ^ [(2dA + A)!] . 

■ 

We give per^'^^"'''^ a lower bound by using the van der Waer- 
den permanent theorem (see p. 104 in [11]): the permanent of 
an n X n doubly stochastic matrix A (i.e., A has nonnegative 
entries, and every row sum and column sum of A is 1.) is no 
less than Unfortunately, ylf-^'"-'') is not a doubly stochastic 
matrix, since the row sums and columns sums range from 
dA + A to 2dX + A. We estimate the lower bound via a matrix 
derived from A'^'"'''^ as follows. 

Lemma 3: perAf^^"'"^) > i^^^±^ ■ ^. 

Proof Let A = 2dX+A^^ " "^hich has the sum of any 
row or column bounded by 1, but is not a doubly stochastic 
matrix. Observe that every row sum of A is 1 except the first 
dX and last dX rows. For i G [d] and j G [A], both row {iX — 
X + j) and row {n — iX + j) sum to Now we construct 

an n X n matrix B from A with each row sum equal to 1 as 
follows: 

For i e [d] and j G [A], add 2d\+x 

1) The first (d — i + 1)A entries of row {iX — A + j). 

2) The last {d — i + 1)A entries of row {n — iX + j). 

The row sums of the first dX and last dX rows of B are now 

(rf-^+l)A d+i _ 1 
2d\+X ^ 2d+l ^■ 

We turn to check the column sums of B. Since A is 
symmetric and by the definition of B, we know B is sym- 
metric as well. Thus we have that B is doubly stochastic and 
perS > ^. 

Now we turn to bound per^'^^"'''^. Observe that the entries 
of the first dX and last dX rows of B are at most 2d\+x '^^^^ 
of the corresponding entries of A''-^'^''^\ and the other rows 
are exactly 2d\+\ times of the corresponding rows of A^-^'^''^\ 
We have perAf^--'') > i^^!^perB > i2f+^^. ■ 

With Lemma |2] and Lemma [3] we have the asymptotic 
bounds as follows. 

Theorem 2: 



7 1 



< Foo(A,n,d) < 



[(2dA-A)!]^^ " ^'^ ' ' ' " (2A- L^J +A)" 
III. Encoding and decoding 

Our construction idea is based on the previous work[8] by 
Lin, et al. We generalize their algorithm for constructing FPAs. 
Furthermore, we give the first locally decoding algorithm for 
FPAs under Zoo -norm. 

A. Encoding algorithm 

We give an encoding algorithm E\ (see Figure [T]| which 
convert A:-bit message into a permutation in 5*^ where n > 

k + X. 

The encoding algorithm E^^ ^ maps binary vectors from Z\ 
to 5*^ and it is a distance preserving mapping. It is clear that 
^ runs in 0(n) time while encoding any fc-bit message. 



, ,TOfe) G 



2 

e Si 



Algorithm E^ ^ 
Input: (mi, . 
Output: (a;i, . . . , a;„] 
max ^ n; min ^ 1; 
for i ^ 1 to fc do 
it rrii ~ 1 
then {x^ ^ max 
else {xi <— [^^]; min + 
for i ^ fc + 1 to n do 

Xi ^ f-^^x^l ; min ^ min + 

Output {xi, . . . , Xn)- 



- max — 1;} 
min + 1;} 



1; 



Fig. I. 



i?^ ^ encodes messages in Z| with 5^. 



Next we investigate the properties of the code obtained by 
'l ^.. Let J. be the image of h 
Theorem 3: is a (A,n, [- 



Kk- Let C^^ be the image of E}^^^. 

^J)-FPA with cardinahty 



Proof: Consider two messages p — {pi,...,pk) and 
q = {qi, . . . ,qk) G . Let and x'^ be the outputs of E^ ^, 
respectively. Let r be the smallest index such that pr ^ Qr- 
Without loss of generality, we assume pr = 1, Qr = and there 
are exactly z zeroes among pi, . . . ,Pr-i- Consequently, x^ is 
set to [225^1 = and x^ is set to = \^] 

by i?" , 



The distance between xP 


and 


x'^ is: 




n — r + 1 + z 




'l + z' 




A 




X 



> 



> 



l+z l+z 



- 1 



X 

n — k 



X 



1, since r < k. 



The first inequality holds by the fact of ceiling function: 
a < \a~\ < a + 1, for any real number a. Note that the 
distance has integer value only here. If is integer then 
the distance is at least [^^^J; else it is at least — l], 

which is [-^^^J exactly, i.e., the distance between any two 
codewords in ,^ is at least [^^J. Since every message is 
encoded into a distinct codeword, we have j, = 2*^. ■ 

Since ). is a (A, n, [ 
convenience. 



A 



J)-FPA, we let d = for 



B. Unique decoding algorithm 

Unique decoding algorithms for classic error correcting 
codes are usually much more complicated than their encoding 
algorithms. While, our proposed decoding algorithm (see 
Figure |2]i remains simple. 

The running time of is clearly 0{k), even faster than 
the encoding algorithm. We show its correctness as follows. 

Theorem 4: Given a permutation x = {xi, . . . ,Xn) which 
is ^^-close to Elj,{m) for some m G Zf, algorithm U^^. 
outputs m correctly. 



Algorithm U^j^ 

Input: {xi,...,Xn) e 
Output: (mi, . . . , TOfc) e Z2 

max *— n; min ^ 1; 

for i ^ 1 to fc do 

if _ [ir--]| < \x.^^lrn^^\ 

then {uii ^ 1; max <— max — 1;} 
else {mi ^ 0; min min + 1;} 
Output {mi, . . . , mu). 

Fig. 2. C/^ ^ decodes words in to messages in Z!^. 



Proof: By contradiction, assume U^ j. outputs rh ~ 
(mi, • • • ,77ifc) m. Let E^j.{m) = (yi, . . . ,y„), r be the 
smallest index such that m^ 7^ m^ and z be the number of 
zeroes among mi,...,mr_i. At the beginning of the r-th 
iteration, max — n — r + l + z and min = 1 + z because 
for every i < r, mi — rhi. Without loss of generality, assume 
l^mr^rhr^ 0. Note that is set to [^] = r "~^+^+^ ] 



J,. While rhr is decoded to by ?7„j,. 



by E^. 

_ pmp^l > _ r^l|. Thus 

Zoo(a;,i?;^,fe(m)) > 
> 
> 



we have 



" max 
X 



nitn 
A 



1 00 'p 'tJf^ I — I 'i 

k{\^r-\^M + \ 

1 ( r max 1 r mm ~| \ 

2 U A I I A ly 



The last inequality is true, since we know | j | — 

p i+£^ > L^J = ^ fro™ *e proof of Theorem [S] This 
contradicts that x is ^^-close to E^j^{m). ■ 

C. Locally decoding algorithm 

Next we show a locally decoding algorithm f., see Figure 
[3j which is a probabilistic algorithm. We discuss its efficiency 
and error probability in this subsection. We prove that it reads 
at most A + 1 entries of the received word in Lemma |4l hence 
its running time is 0(A). It has a chance to output wrongly, 
but we show that the error probability is small in Theorem |5] 
Furthermore, ^ always outputs correct message bit when it 
was given a codeword as input, see Corollary [T] 

Algorithm L^j, 

Input: i e [n] , (xi , . . . , a;„) G 5^ 
Output: mi, the i-th message bit 

J ^ {i + I, . . . , n}; 

do 

Uniformly and randomly pick j G J; 
if Xi > Xj then output 1; 
if a;^ < Xj then output 0; 

j^j-{jy, 

loop; 

Fig. 3. J. decodes one bit by reading at most A + 1 symbols. 



Lemma 4: Given a permutation x = {xi, . . . ,Xn) G 
and an index i E [k], terminates within A iterations. 



Proof: By contradiction, assume f. does not output 



-A 

before the end of the A-th iteration. For ^ < A, let ji be 
the index picked in the £-th iteration. For every ^ < A, we 



, otherwise L^^ /. outputs at the £-th iteration. 



have Xi = X 
Therefore, there are at least A 



1 entries of x equal to Xi. 



It implies x ^ ci contradiction. There is some Xj^ ^ Xi, 
and outputs in the i-th iteration. ■ 

, Xn) (5-close 
for some m 



Theorem 5: Given a permutation x = {xi, . 



G S. 



to a codeword E^ ki''^) = {Uii ■ ■ ■ ■ 
and an index i G [k], outputs mi with probability at least 



n,k 



1 



254 



^ at its first iteration. 

Without loss of generality, we assume mi — 0, 



d 

Proof: 

Hi = t and let u be the maximum number among yi+i, . . . , j/n, 
i.e., at the start of the i-th iteration min = t and max = u 
while encoding. Assume there are 7 numbers equal to t among 
yi, . . . , j/i_i, and there are 7' numbers equal to u among 
Ui+i, . . . , y„. According to the encoding algorithm, we have 



,t + l,. 



,U,.. 



< S and 



Since locix, E^ ki''^)) — '^^ have |, 

yi\ < S. The probability that L^^ f. does not output m^ at the 
first iteration is: 



Filxi > Xj] 



< 
< 



There are at most 2SX + A - 
equal to yi + 2S. Thus, 

{26+l)X 



Pr[xj > Xj] < 



Pr[yi + d> Xj] 
Pr[y, + 6>yj^6] 
PY[y, + 2d>y,]. 

7 ~ 1 possible yj 's less than or 



7-1 25A + A 26 + 1 



< 



dX 



Therefore, the probability that L^^ f. outputs m^ correctly at 
the first iteration is at least 1 — ^^j^- ■ 

Corollary 1: Given a codeword x = E^ ki''^) ^'^^ some m 
and an index i, outputs m^ correctly. 

Proof: By Lemma |4] there exists £ < X such that ^ 
terminates at the ^-th iteration. Let j be the index picked at 
the £-th iteration, we have Xj ^ Xi, where j > i. Note that x 
is a codeword: Xi < Xj implies m^ = and Xi > Xj implies 
mi = 1. Hence, f. outputs m^ correctly. ■ 

A private information retrieval system (PIR) consists of 
q servers. All servers know a codeword x = {xi, . . . ,Xn) 
representing a message m = (mi, . . . , m^), and a user wants 
to know one bit m^ of m via query a symbol from each server. 
We say a PIR has retrievability r if the user can obtain the mes- 
sage bit with probability r. Let Vi^s, i) be the distribution of 
entry queried from server i when the user tries to retrieve m^. 
A PIR has privacy p if TiYWiij^^k],se[q\ ^(^(s, i), ^(s, j)) < 
p, where A(-, •) is the statistical distance. A (g,r,p)-PIR is a 
q-server PIR with retrievability r and privacy p. A {q,r,p)- 
PIR has perfect retrievability if r = 1 and perfect privacy if 
p = 0. 

With our FPA C^^ j., we construct a (A + 1, 1, r)-PIR with 
perfect retrievability and privacy r. The scheme is simple: 



• For a message m, we put x = ^ (m) on all A + 1 
servers. 

• We retrieve to, by ^ by querying entries from servers 
in a random order. 

The perfect retrievability is guaranteed by Corollary 1 . How- 
ever, in order to retrieve nii, Xi must be queried from some 
servers at certain positions £ > i, and we have r > 0. We 
leave the improvement on the privacy r as our future work. 
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